THIRUVANANTHAPURAM: RM Education Solutions India (RMESI), the offshore development centre of RM plc, U.K., has been recommended for certification against ISO 27001:2005, the International Standard which enfolds the requirements for an Information Security Management System (ISMS).

One of the top IT companies in the Technopark here, RMESI underwent an audit conducted by Intertek, an international certification organisation providing professional management systems certification services, on behalf of RvA of the Netherlands, the accreditation body. This was an upgrade from the BS 7799-2:2002 certification achieved by the company in June 2005. It was achieved as a result of the total commitment to the company's information security programme shown by all management and staff. RMESI said that it was the first company in Kerala to be recommended for ISO 27001:2005 certification.

ISO 27001:2005 standard provides a comprehensive set of controls comprising the best practices in information security. It helps identify, manage and minimise the range of threats to which company information is regularly subjected. An Information Security Management System (ISMS) is a systematic approach to managing sensitive company information so that it remains secure. It encompasses people, processes and IT systems. During the certification process, Intertek verified RMESI's compliance with the security standard which includes compliance with legal requirements. The scope of certification of RMESI is the Information Security Management System covering all information assets deployed for development of software and providing business process services. The audit determined the conformity and effectiveness of RMESI's ISMS, which met the ISO 27001:2005 standards.

Connell Viegas, CEO of RMESI said, "We are pleased to have been recommended for ISO 27001 certification. This certification reinforces RMESI's maturity and commitment to safeguarding the confidentiality and integrity of RM's information."

"The certification was the outcome of a three month long effort involving a comprehensive risk assessment, formulation of policies and procedures and an extensive training programme for all staff. A robust information security management system is essential in the present electronic era where confidentiality, integrity, and availability of information have become crucial," Mr Viegas said.

Anand Balakrishnan, RMESI's CTO, who is also the Chief Information Security Officer, added: `This is a testimony to our commitment to information security of assets and continual improvement on our process goals."

Printer friendly page  
Send this article to Friends by E-Mail